---
id: CVE-2026-46127
title: 'RDMA/ocrdma: Don''t NULL deref uctx on errors in ocrdma_copy_pd_uresp()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp()

  Sashiko points out that pd->uctx isn't initialized until late in the
  function so all these error…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= fe2caefcdf5869f308c102e3d64d40683bfad711 <
    b610f33c5523fe26f6dd897667fff9c7a1de5905
  - >-
    Linux >= fe2caefcdf5869f308c102e3d64d40683bfad711 <
    443c991fbc954cc9363e963c09f404b9f281f3a2
  - >-
    Linux >= fe2caefcdf5869f308c102e3d64d40683bfad711 <
    27b6eb1f27fda9bdd5cae028e396758cdf525845
  - >-
    Linux >= fe2caefcdf5869f308c102e3d64d40683bfad711 <
    e01a957561f663d3b68d2fd233a4502e3367efcd
  - >-
    Linux >= fe2caefcdf5869f308c102e3d64d40683bfad711 <
    75fc130664ae324e7b2f9ad3630e0f175e9ca6c8
  - >-
    Linux >= fe2caefcdf5869f308c102e3d64d40683bfad711 <
    8832626a483439e207734e027afff322ccdf726e
  - >-
    Linux >= fe2caefcdf5869f308c102e3d64d40683bfad711 <
    ec44c00a4fe1327efa35083f98b39c01cb535a51
  - >-
    Linux >= fe2caefcdf5869f308c102e3d64d40683bfad711 <
    34fbf48cf3b410d2a6e8c586fa952a36331ca5ba
  - Linux 3.5
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:09:17.301683Z'
published: '2026-05-28'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:13:38.934Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-46127'
references:
  - url: 'https://git.kernel.org/stable/c/b610f33c5523fe26f6dd897667fff9c7a1de5905'
  - url: 'https://git.kernel.org/stable/c/443c991fbc954cc9363e963c09f404b9f281f3a2'
  - url: 'https://git.kernel.org/stable/c/27b6eb1f27fda9bdd5cae028e396758cdf525845'
  - url: 'https://git.kernel.org/stable/c/e01a957561f663d3b68d2fd233a4502e3367efcd'
  - url: 'https://git.kernel.org/stable/c/75fc130664ae324e7b2f9ad3630e0f175e9ca6c8'
  - url: 'https://git.kernel.org/stable/c/8832626a483439e207734e027afff322ccdf726e'
  - url: 'https://git.kernel.org/stable/c/ec44c00a4fe1327efa35083f98b39c01cb535a51'
  - url: 'https://git.kernel.org/stable/c/34fbf48cf3b410d2a6e8c586fa952a36331ca5ba'
tags:
  - cve.org
epss: 0.00128
epssPercentile: 0.02478
ingestedAt: '2026-11-06T16:57:43.333Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp()

Sashiko points out that pd->uctx isn't initialized until late in the
function so all these error flow references are NULL and will crash. Use
the uctx that isn't NULL.

## Affected

- `Linux >= fe2caefcdf5869f308c102e3d64d40683bfad711 < b610f33c5523fe26f6dd897667fff9c7a1de5905`
- `Linux >= fe2caefcdf5869f308c102e3d64d40683bfad711 < 443c991fbc954cc9363e963c09f404b9f281f3a2`
- `Linux >= fe2caefcdf5869f308c102e3d64d40683bfad711 < 27b6eb1f27fda9bdd5cae028e396758cdf525845`
- `Linux >= fe2caefcdf5869f308c102e3d64d40683bfad711 < e01a957561f663d3b68d2fd233a4502e3367efcd`
- `Linux >= fe2caefcdf5869f308c102e3d64d40683bfad711 < 75fc130664ae324e7b2f9ad3630e0f175e9ca6c8`
- `Linux >= fe2caefcdf5869f308c102e3d64d40683bfad711 < 8832626a483439e207734e027afff322ccdf726e`
- `Linux >= fe2caefcdf5869f308c102e3d64d40683bfad711 < ec44c00a4fe1327efa35083f98b39c01cb535a51`
- `Linux >= fe2caefcdf5869f308c102e3d64d40683bfad711 < 34fbf48cf3b410d2a6e8c586fa952a36331ca5ba`
- `Linux 3.5`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.